Privacy Policy

In short

Your financial data lives only on your device and in your personal iCloud. We have no server with your transactions, we cannot see your spending. No ads, no trackers, no advertising identifiers.

What is stored and where

Transactions, accounts, categories, subscriptions and goals are stored locally and synced via a private CloudKit database in your iCloud account. Only your Apple ID has access to it — the developer does not.

Receipt and voice recognition

When you recognize a receipt from a photo or dictate an expense, the photo or phrase text is sent through our proxy server (Cloudflare Workers) to OpenRouter, where a language model (Google Gemini) processes it — solely to return the recognized items. Request content is not stored on our proxy; the model provider processes requests under its own policy, without using them for model training.

Scanning a fiscal receipt QR (Ukraine) sends the QR contents to the public tax registry to fetch receipt items. Currency rates are fetched from the public monobank API. No personal data is transmitted in either case.

Technical data

To prevent abuse and enforce limits, the proxy stores an anonymous device identifier (a random UUID that cannot be linked to you) and request counters. This is the only thing we store — for up to 90 days.

Subscriptions

Subscription payments are handled by Apple (App Store). We never receive or store payment details. Terms: Apple standard EULA.

Data deletion

Delete the app and its iCloud data (Settings → Apple ID → iCloud → Manage Account Storage → PinoMoney → Delete Data) — nothing remains on our side except anonymous counters, which expire within 90 days.

Contact

Privacy questions: berezhniy@gmail.com